CVE-2024-3129: SourceCodester Image Accordion Gallery App add-image.php unrestricted upload
A vulnerability was found in SourceCodester Image Accordion Gallery App 1.0. It has been classified as critical. This affects an unknown part of the file /endpoint/add-image.php. The manipulation of the argument imagename leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258873 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3129?
CVE-2024-3129 has been classified as a critical vulnerability.
What components are affected by CVE-2024-3129?
CVE-2024-3129 affects an unknown part of the file /endpoint/add-image.php in the SourceCodester Image Accordion Gallery App.
How does CVE-2024-3129 exploit unrestricted file upload?
CVE-2024-3129 allows attackers to exploit unrestricted file upload by manipulating the argument image_name.
How can I mitigate CVE-2024-3129?
To mitigate CVE-2024-3129, ensure that file uploads are properly validated and restricted by checking file types and sizes.
Is there a patch available for CVE-2024-3129?
As of now, there is no specific patch mentioned for CVE-2024-3129, so monitoring for updates from SourceCodester is advisable.